PRIVACY

The Privacy Policy provides guidance on EIS Health’s legal obligations and ethical expectations in relation to privacy. This policy outlines how EIS Health handles personal information and how we comply with our privacy obligations.

Under this policy, we adhere to the:
Privacy Act 1988 (Cwlth) (Privacy Act)
Health Records and Information Privacy Act 2002 (NSW)

Read the Central and Eastern Sydney PHN Privacy Policy.

Data Breaches and Information Security Incidents

Information Security Incident Assessment and Response Procedure

The CESPHN ‘Information Security Incident Assessment and Response Procedure’ outlines our approach to information security events and incidents, including data breaches. It enables us to respond in a timely manner and mitigate harm in the event that CESPHN experiences a data breach or suspects that a data breach has occurred. This procedure is a requirement of the Privacy Act 1988 under the Notifiable Data Breach Scheme.